FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libavutil-develUpgrade libavcodec57-32bitUpgrade libpostproc54Upgrade ffmpeg-4-libavresample-develUpgrade libswscale5_9Upgrade libavfilter6-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libswresample3_9Upgrade libavresample3-32bitUpgrade libavformat58_76-32bitUpgrade libavformat58_76Upgrade libswresample3_9-32bitUpgrade libswscale8Upgrade ffmpeg-4-libswresample-develUpgrade libswscale4-32bitUpgrade libavcodec-develUpgrade libpostproc55_9Upgrade ffmpeg-4-libswscale-develUpgrade libswresample-develUpgrade libavdevice-develUpgrade ffmpeg-4-libavformat-develUpgrade libavdevice61Upgrade libswscale4Upgrade libavutil55-32bitUpgrade libswscale-develUpgrade libswresample2Upgrade libavresample-develUpgrade libavfilter-develUpgrade libavresample4_0-32bitUpgrade libpostproc54-32bitUpgrade libavformat-develUpgrade ffmpeg-7Upgrade libavfilter7_110Upgrade ffmpeg-4-private-develUpgrade libavutil59Upgrade libavcodec61Upgrade libavcodec57Upgrade libpostproc-develUpgrade libswscale5_9-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade ffmpeg-4-libpostproc-develUpgrade libpostproc55_9-32bitUpgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4Upgrade libavresample4_0Upgrade libavformat57Upgrade libavfilter7_110-32bitUpgrade libavformat61Upgrade libavutil56_70Upgrade libswresample5Upgrade libavdevice58_13Upgrade ffmpeg-private-develUpgrade libavutil55Upgrade libavformat57-32bitUpgrade libavfilter6Upgrade libavdevice58_13-32bitUpgrade libavdevice57-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpegUpgrade libswresample2-32bitUpgrade libavutil56_70-32bitUpgrade libavdevice57Upgrade libavcodec58_134Upgrade libpostproc58Upgrade libavfilter10Upgrade libavcodec58_134-32bitUpgrade libavresample3 | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub